The horizontal rows are eight related risk and control components, including:

Internal environment

Objective setting

Ensures that management implements a process to formulate strategic, operations, reporting, and compliance objectives that support the company’s mission and are consistent with the company’s tolerance for risk.

Strategic objectives are set first as a foundation for the other three.

The objectives provide guidance to companies as they identify risk-creating events and assess and respond to those risks.